Skip to content
18+ 🇦🇺 Australia Editorial desk Contact Desk
Take the Bonus

Privacy Policy

Information we collect

When you open an account we record your full name, date of birth, residential address, email address, telephone number, and chosen currency. Anti-money-laundering rules attached to our Curaçao GCB licence also require us to obtain identity documents and, in some cases, evidence of your source of funds.

Transactional records are generated automatically as you use the site: deposits, withdrawals, wagers placed, bonuses claimed, and the outcome of each game round. These records are produced by our platform and cannot be edited after the fact.

Technical information is captured on every visit, including IP address, browser and device type, operating system, referring page, and timestamps. We also log unsuccessful login attempts and geolocation signals used to confirm that access is permitted from your jurisdiction.

How your information is used

The primary purpose is contractual: we cannot operate an account, credit a deposit, settle a wager, or release a withdrawal without processing the categories listed above. Refusing to supply mandatory verification data means an account cannot be activated.

A second purpose is legal compliance. Winshark Casino is obliged to run sanctions and politically-exposed-person screening, to retain transaction histories for regulatory inspection, and to report suspicious activity where the law requires it.

We further rely on legitimate interests to prevent fraud, detect bonus abuse and duplicate registrations, secure our infrastructure, and improve the product through aggregated usage statistics. Direct marketing by email or SMS is sent only where you have opted in, and every message carries a one-click unsubscribe link.

Disclosure and cross-border transfers

Personal information is shared with payment processors, identity-verification providers, game studios that supply the titles in our lobby, cloud hosting partners, and customer-support tooling vendors. Each is bound by a written agreement limiting use of the data to the service they perform for us.

We disclose information to the Curaçao Gaming Control Board and to law-enforcement or tax authorities when a valid legal request is received. We do not sell personal information to third parties in any circumstance.

Because our processors operate in several jurisdictions, your information may be stored or accessed outside Australia — principally within the European Economic Area and Curaçao. Where a transfer occurs, we apply standard contractual clauses or an equivalent safeguard recognised by the receiving jurisdiction.

Retention, security, and your rights

Account and transaction records are kept for a minimum of five years after an account closes, in line with anti-money-laundering obligations. Marketing preferences and support transcripts are held for shorter periods and then deleted or irreversibly anonymised.

We protect data with TLS encryption in transit, encryption at rest for identity documents, role-based staff access, and periodic penetration testing by an external firm. No system is immune to compromise, so we also maintain an incident-response procedure covering notification to affected members and to the regulator.

You may request a copy of the information we hold, ask for corrections, withdraw marketing consent, or request erasure of data we are not legally required to keep. Australian residents may additionally complain to the Office of the Australian Information Commissioner if they are dissatisfied with our response.

Cookies and similar technologies

Strictly necessary cookies keep you signed in and protect the session from hijacking; these cannot be disabled without breaking core functionality. Analytics and preference cookies are optional and controlled through the consent banner shown on your first visit.

You can clear or block cookies from your browser settings at any time. Doing so may require you to re-enter credentials more frequently and will reset any display preferences saved on the device.

Where to get help

  • Data Protection Officer, Winshark Casino — privacy requests submitted through the Contact page
  • Player support — live chat, available around the clock from within your account
  • Office of the Australian Information Commissioner — oaic.gov.au for unresolved privacy complaints
This document is published for transparency and does not create rights beyond those granted by applicable data-protection law. Where a conflict arises between this summary and a binding statutory obligation, the statutory obligation prevails.